Privacy Policy

1. Who we are

Website MedTur Kraków (najlepsza-turystyka-stomatologiczna-krakow.pl) — an independent information resource publishing a ranking of dental clinics in Kraków for medical tourism. The site is not a medical organisation and does not provide medical services.

Site operator: MedTur Kraków, email: privacy@najlepsza-turystyka-stomatologiczna-krakow.pl

2. What data we collect

2.1 Data you provide voluntarily

When completing the "Submit a clinic for review" form, you may provide:

• Name and website of the clinic
• Your email address (for correspondence)
• Additional details about the clinic that you enter in the free-text fields

This data is used exclusively to process the submission and notify you of the outcome.

2.2 Data collected automatically

When you visit the site, the following technical data may be collected automatically:

• IP address (in anonymised form)
• Browser type and version, operating system
• Pages you view and duration of the visit
• Referring page (referrer)

This data is used only for traffic analysis and improving the website. It does not allow you to be personally identified.

3. Cookies

We use only the technically necessary cookies without which the site cannot function correctly. We do not use marketing, advertising or third-party tracking cookies.

You can block cookies at any time in your browser settings. Disabling technical cookies may affect some site features.

4. How we use your data

Collected data is used exclusively for the following purposes:

• Processing submissions for inclusion of clinics in the ranking
• Responding to enquiries sent through the contact form
• Site improvement based on anonymous traffic analytics
• Compliance with legal obligations under applicable law

We never use your data for advertising mailings without explicit consent, profiling or transfer to third parties for commercial purposes.

5. Legal basis for processing (GDPR)

The site is accessible to users from the European Union. Processing of personal data is carried out on the following legal bases under EU Regulation 2016/679 (GDPR):

• Article 6(1)(b) — performance of a contract or pre-contractual measures (processing of clinic submission requests)
• Article 6(1)(f) — legitimate interests of the controller (site improvement, anonymous analytics)
• Article 6(1)(a) — consent (where applicable, e.g. subscription to updates)

6. Transfer of data to third parties

We do not sell, rent or transfer your personal data to third parties for commercial purposes. Limited data transfer is only possible in the following cases:

• Technical service providers (hosting, analytics) — solely to the extent necessary for the operation of the site, under data processing agreements
• Legal compliance — if required by law or at the request of competent authorities

If we use third-party analytics tools (e.g. Google Analytics), data is transferred in anonymised form with IP masking applied.

7. International data transfers

Where cloud services or analytics tools are used whose servers are located outside the EEA, data transfer is carried out in accordance with EU Standard Contractual Clauses (SCC) or other mechanisms ensuring an adequate level of protection.

8. Data retention periods

After the specified periods, data is deleted or irreversibly anonymised.

9. Your rights

Under GDPR you have the following rights regarding your personal data:

• Right of access — to obtain information about what data is held about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure ("right to be forgotten") — to request deletion of your data
• Right to restriction of processing — to temporarily restrict the use of your data
• Right to data portability — to receive your data in a structured format
• Right to object — to object to data processing based on legitimate interests
• Right to withdraw consent — at any time, without giving reasons

To exercise any of these rights, send a request to: privacy@najlepsza-turystyka-stomatologiczna-krakow.pl. We will respond within 30 days.

You also have the right to lodge a complaint with the data protection supervisory authority. In Poland this is Urząd Ochrony Danych Osobowych (UODO) — uodo.gov.pl.

10. Data security

We implement technical and organisational measures to protect your data against unauthorised access, loss or disclosure. The site operates under HTTPS. Access to data is restricted to persons directly involved in processing submissions.

11. Links to third-party sites

The site contains links to third-party resources (dental clinic websites). We are not responsible for the privacy policies or content of these sites. We recommend reviewing their privacy policies separately.

12. Changes to the privacy policy

We reserve the right to update this policy. In the event of significant changes, the "Last updated" date in the document header will be amended. Continued use of the site after the updated version is published constitutes your agreement to the changes.